Memory corruption in Linux kernel - CVE-2015-4002

Vulnerability identifier: #VU92497

CSH Severity: Low

CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-4002

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The vulnerability exists due to memory corruption error within the oz_usb_rx() function in drivers/staging/ozwpan/ozusbsvc1.c. A remote non-authenticated attacker can read and manipulate data.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-lts-trusty (Ubuntu package)
linux-lts-utopic (Ubuntu package)
linux-lts-vivid (Ubuntu package)

Install update from vendor's repository.

linux (Ubuntu package) - addressed in versions 3.13.0-57.95, 3.16.0-43.58, 3.19.0-22.22
linux-lts-trusty (Ubuntu package) - update to 3.13.0-57.95~precise1
linux-lts-utopic (Ubuntu package) - update to 3.16.0-43.58~14.04.1
linux-lts-vivid (Ubuntu package) - update to 3.19.0-22.22~14.04.1

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d114b9fe78c8d6fc6e70808c2092aa307c36dc8e
• http://openwall.com/lists/oss-security/2015/06/05/7
• https://github.com/torvalds/linux/commit/9a59029bc218b48eff8b5d4dde5662fd79d3e1a8
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a59029bc218b48eff8b5d4dde5662fd79d3e1a8
• https://github.com/torvalds/linux/commit/d114b9fe78c8d6fc6e70808c2092aa307c36dc8e
• http://www.securityfocus.com/bid/74668
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html
• http://www.ubuntu.com/usn/USN-2667-1
• http://www.ubuntu.com/usn/USN-2665-1

• Memory corruption in Linux kernel staging ozwpan driver
• Ubuntu update for linux
• Ubuntu update for linux
• Ubuntu update for linux-lts-vivid
• Ubuntu update for linux-lts-utopic
• Ubuntu update for linux
• Ubuntu update for linux-lts-trusty